$ rpki-client -vvf rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft File: 8BBABE3D733222C2B6A217449635616F4F2C9625.mft (raw, json) Hash identifier: XvOxID5qdzC0m+xIfWpyPgoljt4VERJsmhIETFcqSRI= Subject key identifier: 44:6A:09:4B:6B:91:71:A0:97:2E:FD:CA:43:3E:BA:2D:AF:EF:98:D0 Authority key identifier: 8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 Certificate issuer: /CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Certificate serial: 706841FE9D2AC160673CB6A2F4155BD68E089904 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:13:40 +0000 Manifest this update: Mon 20 Jul 2026 22:08:40 +0000 Manifest next update: Wed 22 Jul 2026 00:57:40 +0000 Files and hashes: 1: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: 3IjI2krzhLJYlKJkWyMM6q/EfNey4aUG89WZvwYr9zI=) 2: 8BBABE3D733222C2B6A217449635616F4F2C9625.crl (hash: ICRO6xBEjDqbudnTvZEzM7qGkW4C2rnydMI6zNuy9HQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.crl rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:68:41:fe:9d:2a:c1:60:67:3c:b6:a2:f4:15:5b:d6:8e:08:99:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Validity Not Before: Jul 20 22:08:40 2026 GMT Not After : Jul 22 00:57:40 2026 GMT Subject: CN=446A094B6B9171A0972EFDCA433EBA2DAFEF98D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7e:75:98:84:8c:5f:ae:6d:70:7c:ae:28:2d: d7:53:35:3a:16:40:9a:40:4b:17:4d:15:1a:c0:42: 66:d8:55:b6:da:32:ef:7d:2c:ae:65:c8:78:f6:12: 85:fd:2a:9c:2b:e5:68:5d:b0:d3:7e:87:d5:8f:e3: 04:96:80:0e:4e:67:bf:cd:8d:63:41:9c:2e:fd:f2: 79:6f:88:17:da:28:80:82:1f:75:ca:7a:c7:d8:80: 20:16:40:f2:a4:30:cc:0f:30:55:f4:74:8e:12:62: 14:d9:2e:5f:71:90:83:c1:e0:17:56:4b:6b:b4:29: 4e:d5:dc:b4:44:5f:19:ae:6f:86:bb:a3:a9:6b:75: 0a:77:31:72:05:c5:c1:89:f3:e5:17:c0:b7:76:97: 6c:ba:e1:2f:6b:83:de:da:38:21:73:e1:e5:a7:6f: 92:b2:e0:b1:4a:06:bf:96:3d:d0:31:b3:80:ba:9b: ba:11:28:a1:90:54:22:58:d0:08:81:57:7f:37:01: c7:b3:cc:e8:e8:66:4a:ab:7c:7e:23:e8:da:ec:9c: b5:0c:05:5b:9b:e2:3e:0c:89:cf:84:7b:93:99:e5: 02:89:e9:87:65:ca:86:05:68:81:77:95:52:0a:88: e7:92:11:42:4b:25:89:fd:36:6f:10:2e:6d:4f:cb: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6A:09:4B:6B:91:71:A0:97:2E:FD:CA:43:3E:BA:2D:AF:EF:98:D0 X509v3 Authority Key Identifier: keyid:8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:bc:26:d9:d1:df:c2:1b:1b:a2:b6:87:5e:cd:28:ee:e3:af: f7:c6:b5:b1:0a:88:19:c4:c2:36:57:8f:0e:3a:c6:5a:6f:13: 96:ea:5a:a6:68:49:1c:cd:c7:c6:d1:84:e8:4b:8d:44:e2:62: 5e:32:61:77:b0:14:9e:06:a9:a6:cb:8f:ea:8e:6d:ba:7e:e6: a1:dc:0c:b7:cd:20:79:c2:1e:77:14:69:8d:e3:18:1e:5d:c5: 48:1d:fd:01:1f:33:c3:2f:da:f4:27:7e:30:4a:dc:32:f6:ed: 62:56:6c:98:b1:0c:5a:13:ab:e2:3e:4d:ce:9f:39:a9:51:b2: 9e:50:c9:72:b5:cf:45:b5:f0:ff:cf:be:54:49:7f:3e:bc:5d: ba:a4:61:b0:20:ce:a5:a7:09:1a:ff:57:76:f4:48:7b:14:89: 7a:d6:96:d7:0a:f7:76:7c:5d:ae:7d:6e:b9:3a:fa:08:44:00: ae:33:84:2f:ac:b8:b2:2d:2e:0c:df:28:d2:65:3b:2e:31:16: ba:8b:64:3c:f3:dd:64:88:7c:60:e9:dc:48:91:71:8d:8d:33: 33:79:88:aa:5a:eb:98:9a:f8:49:52:a8:86:dc:a1:d0:1b:63: db:9e:9a:9b:d6:5f:0f:fb:82:5b:f2:0b:70:2e:ff:5b:85:f2: 0c:1f:e1:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGhB/p0qwWBnPLai9BVb1o4ImQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCQUJFM0Q3MzMyMjJDMkI2QTIxNzQ0OTYzNTYxNkY0 RjJDOTYyNTAeFw0yNjA3MjAyMjA4NDBaFw0yNjA3MjIwMDU3NDBaMDMxMTAvBgNV BAMTKDQ0NkEwOTRCNkI5MTcxQTA5NzJFRkRDQTQzM0VCQTJEQUZFRjk4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWfnWYhIxfrm1wfK4oLddTNToW QJpASxdNFRrAQmbYVbbaMu99LK5lyHj2EoX9Kpwr5WhdsNN+h9WP4wSWgA5OZ7/N jWNBnC798nlviBfaKICCH3XKesfYgCAWQPKkMMwPMFX0dI4SYhTZLl9xkIPB4BdW S2u0KU7V3LREXxmub4a7o6lrdQp3MXIFxcGJ8+UXwLd2l2y64S9rg97aOCFz4eWn b5Ky4LFKBr+WPdAxs4C6m7oRKKGQVCJY0AiBV383AcezzOjoZkqrfH4j6NrsnLUM BVub4j4Mic+Ee5OZ5QKJ6YdlyoYFaIF3lVIKiOeSEUJLJYn9Nm8QLm1PyypzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURGoJS2uRcaCXLv3KQz66La/vmNAwHwYDVR0j BBgwFoAUi7q+PXMyIsK2ohdEljVhb08sliUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFmMDAzMWUtMmE5ZS00N2NhLTkyODMtNDBlOTI3ZTM1OTkzLzAvOEJCQUJFM0Q3 MzMyMjJDMkI2QTIxNzQ0OTYzNTYxNkY0RjJDOTYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkJBQkUzRDczMzIyMkMyQjZBMjE3NDQ5NjM1NjE2RjRGMkM5 NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvOEJCQUJFM0Q3MzMyMjJDMkI2QTIxNzQ0OTYzNTYx NkY0RjJDOTYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIS8JtnR38IbG6K2h17NKO7jr/fGtbEKiBnE wjZXjw46xlpvE5bqWqZoSRzNx8bRhOhLjUTiYl4yYXewFJ4GqabLj+qObbp+5qHc DLfNIHnCHncUaY3jGB5dxUgd/QEfM8Mv2vQnfjBK3DL27WJWbJixDFoTq+I+Tc6f OalRsp5QyXK1z0W18P/PvlRJfz68XbqkYbAgzqWnCRr/V3b0SHsUiXrWltcK93Z8 Xa59brk6+ghEAK4zhC+suLItLgzfKNJlOy4xFrqLZDzz3WSIfGDp3EiRcY2NMzN5 iKpa65ia+ElSqIbcodAbY9uempvWXw/7glvyC3Au/1uF8gwf4WU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:32 2026 by rpki-client